Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
File: fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa (raw, json)
Hash identifier: PXX9a66E2fIHo2Fls7Ox9b2uyyEEZ1akOhot39jwDf8=
Subject key identifier: C7:64:39:71:F3:13:FF:52:80:C9:4E:04:A5:0E:71:5B:95:D0:A9:87
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E10144F0E0389D539A031436D26B84D2028489B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
Signing time: Mon 31 Mar 2025 15:10:59 +0000
ROA not before: Mon 31 Mar 2025 15:10:59 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 208.86.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:10:14:4f:0e:03:89:d5:39:a0:31:43:6d:26:b8:4d:20:28:48:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 31 15:10:59 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=35036aa5fd1b0f704b177125fd75af349b1da704e85cdfcd62ebdda536bfb081, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:3c:4d:da:45:da:28:ea:9e:6a:93:35:76:
c6:3b:28:7b:44:75:72:60:fa:49:98:d5:ee:ba:25:
54:ff:8f:48:53:62:d2:2b:b1:19:f6:d2:7b:7e:91:
b8:7b:37:d7:6a:2b:14:84:35:cf:87:31:cc:4a:5c:
42:80:e6:3e:f1:3b:0c:88:c8:7c:38:09:69:9e:36:
c9:ce:ed:49:0d:02:ff:95:a9:9d:b3:cb:71:08:2a:
96:3b:be:ca:64:c5:bd:d4:c9:99:98:5d:74:2c:5d:
9a:9c:4b:54:72:12:0d:af:00:c1:ea:86:aa:4e:c1:
3f:a6:a2:7d:94:33:5f:7c:63:3f:42:bd:33:73:32:
c0:94:e6:0d:8f:9c:8e:7d:32:b3:9e:84:b5:35:a4:
dc:eb:96:88:f6:63:0b:71:f9:ad:56:07:20:99:76:
08:d1:93:fc:56:b0:be:4c:5d:e2:6f:34:04:65:ff:
ba:96:ef:ed:21:37:7f:de:76:ba:37:93:f2:fc:64:
7d:75:9e:8d:67:ee:39:1f:56:20:d1:3a:58:b5:d4:
1f:9f:af:d7:72:11:8f:60:90:d3:29:c1:58:60:a8:
6b:96:1d:a8:d5:ac:c5:73:36:fa:27:2e:2a:c7:59:
12:77:b4:7c:70:52:c0:73:77:64:f2:aa:a1:fb:b2:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:64:39:71:F3:13:FF:52:80:C9:4E:04:A5:0E:71:5B:95:D0:A9:87
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/23
Signature Algorithm: sha256WithRSAEncryption
60:09:76:71:36:e5:32:0b:8e:25:f3:0d:91:c5:84:2d:aa:03:
56:99:c2:fd:7d:5f:29:1d:27:91:e2:db:08:fb:9c:e3:7f:9e:
d6:68:cd:22:6b:3d:33:23:ac:63:7f:90:2e:d6:6b:8f:68:d8:
56:ab:7e:5f:2a:56:05:ca:bc:9f:a4:e9:a9:46:a0:6f:cd:41:
60:f2:1c:cd:13:c9:19:c1:7b:3c:a3:6f:12:32:29:f7:3f:ec:
52:a1:37:df:50:b8:b0:86:a4:63:b7:1b:45:05:25:85:54:47:
3e:42:fb:87:e5:1d:5a:46:50:b8:b4:8e:44:ff:45:d5:ca:f1:
0a:34:45:77:c9:10:38:67:30:d0:da:71:76:03:3c:9a:23:c8:
04:54:9c:59:55:6c:ca:6c:ab:25:6e:f5:11:4f:43:8c:8f:10:
76:b7:4b:46:b6:0b:51:21:ca:28:c6:72:72:b3:dc:4b:0e:14:
b4:4b:33:6d:71:67:81:07:44:6c:e1:8c:9c:0f:c0:58:42:da:
f9:da:02:e9:a7:22:6e:0d:8f:b6:a8:84:ed:60:db:f7:f5:eb:
4f:3a:57:5c:f7:bd:83:46:db:ff:a3:cc:81:50:36:39:71:4f:
f9:f7:f5:be:38:73:c2:3e:b2:22:f6:61:71:d4:c1:d1:97:a5:
0c:01:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:26 2025 by rpki-client on console.sobornost.net